Disclosed Chromium Security Bugs

DCHECK failure in disposable_stack->state() == DisposableStackState::kDisposed implies static_cast

#504070398Reporter: 24...@project.gserviceaccount.com
$0
7/27/2026

OOB Write in VaapiJpegEncodeAccelerator::EncodeTask due to missing bounds check

#501867418Reporter: vm...@google.com
$0
7/27/2026

Potential Integer Underflow in VdVideoDecodeAccelerator leading to OOB Read in GPU Process

#498270563Reporter: vm...@google.com
$0
7/27/2026

Potential Heap OOB Write in V4L2 VP9 Legacy Decoder via OverwriteShowFrame

#497431705Reporter: vm...@google.com
$0
7/27/2026

Potential cross-profile info leak and sandbox escape via exposed global AudioFocusManager to ARC

#497391224Reporter: vm...@google.com
$0
7/27/2026

llvm:llvm-opt-fuzzer--x86_64-irce: Use-of-uninitialized-value in llvm::ScalarEvolution::createSCEV

#539180632Reporter: 87...@developer.gserviceaccount.com
$0
7/27/2026

php:php-fuzz-parser: Use-of-uninitialized-value in zend_get_compiled_lineno

#539121135Reporter: 87...@developer.gserviceaccount.com
$0
7/26/2026

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_encode_add_object

#538648852Reporter: 87...@developer.gserviceaccount.com
$0
7/26/2026

libreoffice:ww8fuzzer: Heap-use-after-free in SwNode::FindTableNode

#537186038Reporter: 87...@developer.gserviceaccount.com
$0
7/26/2026

DCHECK failure in dominating_frame_state.valid() in graph-builder.cc

#503615221Reporter: ml...@chromium.org
$0
7/26/2026
Showing 1421-1430 of 13102 bugs